At a glance
1. A Swiss crypto OTC desk does not receive a special “OTC licence”. Its regulatory route depends on what it trades, whose account it trades for, whether it controls client assets and how orders are executed.
2. A professional business exchanging payment tokens against fiat, arranging transfers or operating custodial wallets will normally fall within the Swiss Anti-Money Laundering Act. If no higher FINMA licence applies, it generally needs membership in a FINMA-recognised self-regulatory organisation before starting the regulated activity. [1, 2, 3]
3. SRO membership is AML supervision, not prudential authorisation. It does not permit the desk to accept public deposits, hold payment tokens in collective custody, trade securities as a securities firm or operate a regulated trading venue. [1, 4, 5]
4. The operating model must be frozen before the application: principal or agency trading, payment or asset tokens, bilateral execution or multilateral matching, individual or omnibus custody, fiat settlement, external wallets and outsourcing all affect the perimeter.
5. Crypto-specific controls should cover wallet ownership, blockchain analytics, Travel Rule data, high-risk counterparties, source of funds, sanctions and transaction investigations. FINMA continues to apply the Travel Rule to blockchain payments. [6]
6. Banking is a separate workstream. An OTC desk needs a bank and settlement model that match the regulatory file, customer profile, jurisdictions, projected volumes, custody design and source-of-funds controls.
Founders often use “Swiss OTC licence” as shorthand for a company that buys and sells crypto in negotiated transactions. Swiss law does not regulate the label. It regulates the activities, assets, custody structure and role performed by the company.
This guide explains how to design a Swiss crypto OTC desk for a 2027 launch, when SRO membership may be the relevant AML route, which features can trigger a higher FINMA authorisation and what evidence should exist before the company approaches an SRO or banking partner.
1. What is a crypto OTC desk?
An over-the-counter desk executes negotiated transactions outside a public order book. The customer may ask the desk to quote a price, source liquidity, arrange settlement or act as an intermediary. The desk can trade as principal from its own inventory, as agent for a customer or through a hybrid model.
That commercial description is not enough for regulatory classification. Two firms can both advertise “OTC trading” while performing legally different activities:
- one buys payment tokens from a customer and sells them from its own balance sheet;
- one introduces the customer to a third-party liquidity provider;
- one accepts fiat or crypto, routes the order and settles through accounts it controls;
- one holds customer crypto in individually allocated wallets;
- one holds crypto in an omnibus wallet and maintains an internal ledger;
- one matches multiple buyers and sellers through a platform; and
- one trades asset tokens or derivatives rather than payment tokens.
The regulatory assessment must therefore follow the contractual role, actual flow of assets, private-key control, settlement sequence and legal classification of the tokens.
2. When can SRO membership be the relevant route?
Article 2 of the Swiss Anti-Money Laundering Act covers persons who professionally accept or hold third-party assets or assist in their investment or transfer. It includes payment services and professional trading for one's own account or for others in foreign exchange, securities, commodities and related instruments. [3]
FINMA states that trading virtual currencies and operating payment systems fall within AMLA. A business subject to AMLA must join a recognised SRO unless it is already supervised under another applicable regime. [2]
For a bilateral desk trading payment tokens against fiat without public deposits, collective custody, securities activity or a regulated trading facility, SRO affiliation may therefore be the central Swiss regulatory step. The SRO supervises AML duties such as customer identification, beneficial-owner identification, risk classification, clarification of unusual activity, record keeping, training and suspicious-activity reporting.
FINMA's 2024 data illustrates that SRO-supervised virtual-asset service providers commonly perform exchange services. Its survey covered 203 VASPs, including inactive firms, and showed exchange services as the largest activity category, followed by crypto-to-crypto exchange, payments and custody. [7]
This does not mean every OTC model fits within SRO membership. The perimeter changes when the business introduces deposit-taking, collective custody, securities, derivatives, market making in securities or multilateral execution.
3. SRO membership is not a Swiss crypto licence
FINMA expressly distinguishes an SRO member from a FINMA-authorised and prudentially supervised financial institution. The SRO is a private-law organisation recognised and supervised by FINMA. It monitors members for AML compliance and may audit, sanction or exclude them. [1]
A customer or bank may colloquially call the status a “Swiss SRO licence”, but the legal result is membership and AML supervision. Marketing materials, contracts and banking packs should describe the status accurately.
| Status | What it covers | What it does not prove |
|---|---|---|
| SRO membership | AMLA supervision for the activities admitted by the selected SRO. | FINMA prudential authorisation, deposit-taking permission or securities-firm status. |
| FinTech licence | Acceptance of public deposits up to CHF 100 million or collective custody of cryptoassets under the statutory conditions. | Permission to invest deposits, pay interest or perform every banking activity. |
| Banking licence | Regulated banking activity and deposit-taking within the authorised model. | Automatic permission for every securities or trading-venue activity. |
| Securities-firm or market-infrastructure authorisation | Activities falling within the relevant securities or trading-venue perimeter. | A substitute for the separate AML, product and custody analysis. |
4. Regulatory decision matrix for an OTC desk
| Operating feature | Likely regulatory question | Design response |
|---|---|---|
| Bilateral fiat-to-payment-token trades as principal | Professional financial intermediation under AMLA; SRO route may apply if no higher licence is triggered. | Document quote formation, source of liquidity, settlement, customer identification and transaction monitoring. |
| Agency execution for customers | AMLA can apply because the desk assists with the investment or transfer of assets. | Define authority, discretion, fees, counterparties and whether the desk ever controls client assets. |
| Individual on-chain custody | Custodial control is subject to AMLA; banking-law analysis depends on segregation and availability. | Use individually attributable addresses, reconcile control and preserve evidence of customer entitlement. |
| Collective or omnibus custody | May require a FinTech or banking licence rather than SRO membership alone. | Do not build the wallet and ledger architecture before the licence perimeter is settled. |
| Customer fiat received into the desk's own account | Possible public-deposit and payment-services exposure. | Map legal title, duration, settlement purpose, account structure and any exemption relied upon. |
| Asset tokens or tokenised securities | Securities-firm, offering, advisory or market-infrastructure rules may apply. | Classify each token and restrict the product catalogue until the securities analysis is complete. |
| Matching multiple buyers and sellers | A bilateral desk can become a trading platform or organised trading facility depending on the model. | Define whether customers interact, whether orders are multilateral and how execution rules operate. |
| Non-custodial software only | A provider without legal or factual power over assets may fall outside AMLA for that function. | Contracts, permissions, recovery tools and administrator access must support the non-custodial claim. |
The matrix is a screening tool, not a legal conclusion. A single product can contain several functions, and the strictest applicable regime can determine the route.
5. Principal versus agency trading
A principal desk enters the trade itself. It quotes the customer, becomes the buyer or seller and later offsets the position with a venue, market maker or liquidity provider. The firm should document how quotes are produced, how inventory risk is controlled and when title transfers.
An agency desk executes or arranges a transaction for the customer. The contract should specify whether the desk has discretion, whether it selects counterparties, whether it receives customer assets and whether the customer has a direct relationship with the liquidity provider.
The distinction affects risk and disclosure but does not by itself remove AMLA. Article 2 AMLA reaches both professional own-account trading in specified assets and assistance with investment or transfer activities. [3]
A hybrid model deserves particular care. If the desk sometimes acts as principal and sometimes as agent, each order should show the applicable capacity, price or fee method, counterparty and settlement route. A generic terms-of-business clause is not enough when the actual execution changes from transaction to transaction.
6. Custody and client money determine the upper boundary
Custody design is often the dividing line between an SRO-supervised intermediary and a business requiring prudential authorisation. FINMA distinguishes individual custody from collective custody. Its guidance explains that individual custody of payment tokens held available for the customer can avoid the banking-licence issue, while collective custody can require a FinTech or banking licence. [4]
The analysis should cover both crypto and fiat:
- Who controls each private key?
- Are customer assets held on individual addresses or in an omnibus wallet?
- Can every asset be attributed to one customer at all times?
- Does the company owe the customer a contractual repayment claim?
- Does fiat pass through a company account, safeguarded account or direct customer-to-counterparty route?
- How long can assets remain with the desk?
- Can the desk use, lend, stake or rehypothecate them?
7. Payment tokens versus securities
FINMA classifies cryptoassets by their economic function. Payment tokens are intended as means of payment or value transfer. Asset tokens represent rights comparable to debt, equity or derivatives and may qualify as securities. Utility and hybrid tokens require analysis of their actual function. [5]
An OTC desk limited to widely used payment tokens may remain within an AML-focused model, subject to its custody and settlement design. A desk trading tokenised shares, debt, funds, structured products or derivatives can move into securities regulation.
FINMA states that securities firms can include professional client dealers, certain own-account dealers and market makers, as well as issuing houses and derivatives firms. The licensing requirements include Swiss management, organisation, capital and a precise description of the business. [8]
Maintain an approved token-admission process. It should record the token's function, issuer, rights, transfer restrictions, market, sanctions exposure, blockchain risk and conclusion under Swiss law. Commercial teams should not add a token solely because a liquidity provider can quote it.
8. What the SRO application needs to explain
Each SRO has its own forms, regulations, fee model and admission practice. The application should nevertheless allow the reviewer to understand the company, its people, services, controls and transaction flows without reconstructing the business from marketing materials.
| Application area | OTC-specific evidence | Common weakness |
|---|---|---|
| Corporate structure | Register documents, articles, ownership chart, beneficial owners, directors and signatories. | Ownership evidence does not reach the natural-person level. |
| Business model | Principal/agency capacity, customer types, tokens, countries, pricing and liquidity providers. | Application says “brokerage” but flows show custody or principal trading. |
| Funds flow | Fiat accounts, wallets, settlement steps, reconciliation and title transfer. | Diagrams omit temporary control of customer money or crypto. |
| Governance | Board oversight, management, AML officer, deputy and escalation authority. | AML responsibility is outsourced without internal ownership. |
| AML framework | Risk assessment, onboarding, beneficial ownership, PEP, sanctions, monitoring and reporting. | Generic manual does not address OTC trades or wallets. |
| Technology | Order records, blockchain analytics, wallet controls, access rights, logs and retention. | Vendor names are listed without explaining how exceptions are handled. |
| Outsourcing | KYC, analytics, custody, liquidity, cloud and banking-provider responsibilities. | The company assumes outsourcing transfers regulatory accountability. |
| Banking readiness | Target banks, account purposes, projected volumes, corridors and settlement evidence. | The regulatory model depends on an account type that no bank has agreed to support. |
9. AML controls for OTC trading
The AML programme must reflect the desk's customer base and transaction pattern. High-value negotiated trades create risks that differ from low-value retail exchange. The desk should understand the customer, beneficial owner, purpose of the relationship, expected trade size, source of wealth where relevant, source of funds and destination of assets.
Risk factors can include:
- opaque holding companies, trusts or nominee structures;
- customers acting for undisclosed third parties;
- rapid changes in settlement instructions;
- high-risk jurisdictions or sanctions exposure;
- privacy-enhancing services, mixers or obfuscation patterns;
- funds arriving from an unrelated bank account or wallet;
- newly created wallets receiving high-value inbound transfers;
- transactions inconsistent with the customer's business or wealth; and
- pressure to split, reroute or accelerate settlement after compliance questions.
The case file should retain the alert, supporting data, analyst reasoning, escalation and final decision. A blockchain-risk score without an investigation record does not explain why the trade was accepted.
AMLA also requires records that allow a qualified third party to assess transactions and compliance. Records must be kept for at least ten years after the relationship or transaction ends, and required customer data must be reviewed and updated on a risk basis. [3]
10. Travel Rule and external wallets
FINMA applies payment-information requirements to blockchain transfers. Its Guidance 02/2019 established a strict approach to the Travel Rule, and subsequent FINMA materials continue to emphasise originator and beneficiary information and the treatment of external wallets. [6]
The desk should decide before launch:
- which transfers are VASP-to-VASP and which involve self-hosted wallets;
- how originator and beneficiary data are collected, verified and transmitted;
- how the customer's control of an external wallet is established;
- how missing or inconsistent Travel Rule data are handled;
- which blockchains, assets and counterparties are supported; and
- how rejected, returned or frozen transfers are recorded.
The commercial promise “settlement to any wallet” should not be made until compliance can support it. Wallet verification, counterparty due diligence and data exchange must work within the promised execution time.
11. Choose an SRO for the actual model
FINMA's recognised list contained 11 SROs in its 2026 publication. Recognition does not make every SRO interchangeable. Admission scope, language, crypto experience, fees, audit model, documentation and appetite for the proposed business can differ. [9]
The selection process should test:
- whether the SRO accepts the legal form and specific OTC activities;
- whether it has experience with crypto exchange, custody and blockchain controls;
- which people must be resident, employed or available in Switzerland;
- the application, membership, audit and training costs;
- the expected application evidence and clarification process;
- the audit cycle and accepted auditors;
- change-notification requirements; and
- the languages used for filings, training and supervision.
Do not choose from price alone. A low application fee does not help if the SRO will not admit the model or expects an operating structure the company cannot maintain.
12. Banking and settlement readiness
SRO membership does not guarantee a bank account. The bank performs its own risk assessment and may review ownership, management experience, source of capital, customer locations, supported assets, transaction sizes, liquidity providers, exchanges, wallets, sanctions controls and projected flows.
The banking pack should be consistent with the SRO application:
- one approved description of the business model;
- one ownership and management data set;
- one funds-flow diagram for each product;
- reconciled customer, country and volume assumptions;
- clear purposes for every fiat and crypto account;
- named liquidity and custody counterparties;
- AML, sanctions and blockchain-monitoring evidence; and
- a launch plan that does not rely on unconfirmed account functionality.
An OTC desk should also plan liquidity concentration, prefunding, failed settlement, price volatility and counterparty default. These are commercial risks, but weak controls can undermine the regulatory and banking assessment.
13. A realistic launch sequence
| Phase | Workstream | Exit condition |
|---|---|---|
| 1. Perimeter | Classify tokens, principal/agency capacity, custody, fiat flow and execution model. | Written conclusion on SRO, FinTech, banking, securities and market-infrastructure exposure. |
| 2. Structure | Confirm legal entity, ownership, directors, management and Swiss operating substance. | Applicant and governance structure accepted as workable. |
| 3. Counterparties | Assess banks, liquidity providers, exchanges, custodians and technology vendors. | Target infrastructure supports the stated funds flow. |
| 4. Controls | Build AML, sanctions, Travel Rule, wallet, monitoring, reporting and record-keeping procedures. | Controls are testable on realistic OTC cases. |
| 5. Application | Submit the SRO file and answer model, governance and control questions consistently. | Membership confirmed for the intended activities. |
| 6. Banking | Complete account opening, settlement, reconciliation and access controls. | Live providers support the approved operating model. |
| 7. Launch | Run an end-to-end rehearsal and approve the supported tokens, customers and jurisdictions. | Management documents readiness and launches within the admitted perimeter. |
Timelines vary by SRO, ownership complexity, business model, documentation and response speed. Avoid marketing a fixed approval date before the selected SRO has reviewed the model and evidence requirements.
14. Swiss crypto OTC desk checklist
- Define whether the desk trades as principal, agent or both.
- Classify every supported token as payment, utility, asset or hybrid.
- Map fiat and crypto flows from instruction to final settlement.
- Identify every point where the desk controls customer assets or keys.
- Decide between individual custody, collective custody or no custody.
- Assess public-deposit, FinTech and banking-licence exposure.
- Assess securities-firm, derivatives and trading-venue exposure.
- Confirm the Swiss applicant, governance and operating substance.
- Select an SRO that accepts the actual model.
- Prepare ownership, management and fit-and-proper evidence.
- Write an OTC-specific AML risk assessment and manual.
- Implement customer, beneficial-owner, PEP and sanctions controls.
- Implement blockchain analytics and documented alert investigations.
- Implement Travel Rule and external-wallet procedures.
- Contract and assess liquidity, custody and technology providers.
- Align bank accounts and settlement mechanics with the SRO file.
- Test order, pricing, wallet, settlement and reconciliation records.
- Prepare the ongoing training, audit and change-reporting calendar.
Frequently asked questions
Does Switzerland have a specific crypto OTC licence?
No single authorisation is called a crypto OTC licence. The route depends on the services, token types, custody and settlement structure. A payment-token desk may require SRO membership for AML supervision, while deposits, collective custody, securities or trading-venue activity can trigger higher authorisation.
Can an SRO member trade crypto for customers?
SRO-supervised firms commonly provide exchange services, but membership only covers the activities admitted by the SRO and does not override banking, securities or market-infrastructure rules. The exact model must be classified first. [1, 7]
Does an OTC desk need a FinTech licence?
Potentially. FINMA states that a FinTech licence can apply where a company accepts public deposits up to CHF 100 million or takes collective custody of cryptoassets, provided the statutory conditions are met. An OTC desk without those features may follow a different route. [4]
Can the desk use an omnibus wallet?
It should not assume that SRO membership is sufficient. Collective custody can create FinTech or banking-licence exposure. The wallet, ledger and insolvency treatment should be analysed before implementation.
Are stablecoins treated like ordinary payment tokens?
Not automatically. FINMA assesses the economic function, reserve, redemption promise, issuer and legal rights. A stablecoin can create payment, deposit, collective-investment or securities questions depending on its design.
Can an OTC desk trade tokenised securities with SRO membership only?
SRO membership alone may be insufficient. Asset tokens can qualify as securities, and professional client dealing, market making, derivatives or operation of a trading facility can require FINMA authorisation. [5, 8]
Does SRO membership guarantee banking?
No. Banks make an independent onboarding decision. The strongest application aligns the SRO perimeter, ownership, transaction flows, AML controls, liquidity providers and projected volumes with the requested accounts.
How long does it take to launch a Swiss OTC desk?
There is no reliable universal period. Structure, SRO selection, ownership, regulatory perimeter, application quality, banking, providers and control implementation all affect readiness. Plan the launch around completed dependencies rather than a fixed marketing date.
Related DM Strategy guides
- Swiss Crypto Licence: SRO, FinTech or Bank?, comparing the principal Swiss regulatory routes.
- Swiss SRO Licence Requirements, covering directors, AML officers, office and capital planning.
- Which Swiss SRO Should You Join?, comparing FINMA-recognised options.
- Swiss SRO Application Checklist, covering documents, AML controls and the application sequence.
- Swiss SRO Audit Requirements, explaining ongoing compliance after admission.
Key primary sources
| Ref | Primary source |
|---|---|
| 1 | FINMA: Self-regulatory organisations, SRO membership, AML supervision and the distinction from FINMA-licensed institutions. |
| 2 | FINMA: FinTech financial services providers, AMLA scope for virtual-currency trading and the requirement to assess higher authorisations. |
| 3 | Swiss Anti-Money Laundering Act, financial-intermediary scope, due diligence, records and organisation. |
| 4 | FINMA: FinTech licence and FINMA Guidance 08/2023, public deposits and collective custody of cryptoassets. |
| 5 | FINMA: Cryptoassets fact sheet, token categories and the need for case-specific authorisation analysis. |
| 6 | FINMA Guidance 02/2019: Payments on the blockchain, Travel Rule and wallet-transfer expectations. |
| 7 | FINMA Annual Report 2024, activities of SRO-affiliated virtual-asset service providers. |
| 8 | FINMA: Authorisation requirements for securities firms, client dealing, market making, issuing and derivatives activities. |
| 9 | FINMA: SRO member search and recognised SRO list, current recognised organisations and member verification. |
Disclaimer
This article is for information only and is not legal, tax, regulatory or banking advice. The applicable Swiss requirements depend on the legal entity, services, token classification, customer location, principal or agency role, custody, funds flow, execution model and counterparties. Laws, supervisory practice and SRO rules can change. Confirm the current position before filing, building or launching.
DM Strategy helps crypto founders classify Swiss OTC and brokerage models, select the appropriate SRO or FINMA route, prepare application evidence, build AML and Travel Rule controls and align the regulatory file with banking, custody and liquidity infrastructure. If you are planning a Swiss crypto OTC desk, book an introductory call with DM Strategy before the custody and settlement architecture is fixed.

.jpg)